diff --git a/ops/nixos/bvm-radius/default.nix b/ops/nixos/bvm-radius/default.nix
index b3018c2f59..2615a9a4c8 100644
--- a/ops/nixos/bvm-radius/default.nix
+++ b/ops/nixos/bvm-radius/default.nix
@@ -25,7 +25,7 @@ in {
     defaultGateway = { address = "92.118.28.1"; interface = "enp2s0"; };
     defaultGateway6 = { address = "2a09:a441::1"; interface = "enp2s0"; };
   };
-  # my.ip.tailscale = "100.81.27.52";
+  my.ip.tailscale = "100.120.98.116";
 
   system.stateVersion = "21.05";
 }
diff --git a/ops/nixos/lib/coredns/zones/db.as205479.net b/ops/nixos/lib/coredns/zones/db.as205479.net
index 77fafb3e9c..82a7f9180f 100644
--- a/ops/nixos/lib/coredns/zones/db.as205479.net
+++ b/ops/nixos/lib/coredns/zones/db.as205479.net
@@ -3,7 +3,7 @@
 ; SPDX-License-Identifier: Apache-2.0
 
 ;              MNAME                        RNAME                  SERIAL REFRESH RETRY EXPIRE TTL
-@ 600 IN SOA   frantech-lux01.as205479.net. hostmaster.lukegb.com. 31     600     450   3600   300
+@ 600 IN SOA   frantech-lux01.as205479.net. hostmaster.lukegb.com. 32     600     450   3600   300
 
 ; NB: this are also glue records in Google Domains.
 $INCLUDE tmpl.ns
@@ -68,6 +68,7 @@ bvm-prosody.int     3600 IN A    100.86.22.44
 bvm-win10.int       3600 IN A    100.71.230.20
 bvm-matrix.int      3600 IN A    100.74.197.67
 bvm-netbox.int      3600 IN A    100.81.27.52
+bvm-radius.int      3600 IN A    100.120.98.116
 
 mac-mini.int        3600 IN A    100.91.188.84